$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f64db9d-d1d8-3530-a912-accd8e8cae42.roa File: 3f64db9d-d1d8-3530-a912-accd8e8cae42.roa (raw, json) Hash identifier: B1Ie/GqrtAuRUGwh4jVxw8TeTj/jiiVHhtO4oDYEagc= Subject key identifier: 9C:F4:99:A3:F3:4B:AB:0E:E2:A8:F3:D2:76:00:AC:55:F2:AB:4C:71 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435EB384A76488301BED000 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f64db9d-d1d8-3530-a912-accd8e8cae42.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 65.22.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:eb:38:4a:76:48:83:01:be:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=3de6d2f8-095f-4d37-b390-b39a8a78973d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ca:22:94:63:9d:12:bc:24:a1:40:20:7f:88: 36:50:bd:29:30:cb:bf:31:6e:59:2c:68:55:22:e3: d8:67:65:78:34:0d:fb:6d:39:1b:42:35:e2:67:15: 08:e9:41:12:61:c1:e6:6a:a3:32:d7:81:ce:6f:83: dc:d7:a2:fa:ef:4d:d4:93:a7:1d:09:96:5a:88:82: 96:67:70:42:22:78:16:73:e0:64:81:a8:f8:19:ed: 00:43:f5:9e:9f:61:41:64:94:63:91:3e:2b:f6:16: fb:5c:cd:c3:a4:9a:22:27:aa:74:79:24:ad:d9:9d: 79:5c:d9:a0:05:69:39:2f:61:e8:0d:90:f3:3e:a3: fd:65:df:b8:62:3e:7e:38:40:08:9d:69:4e:38:7a: 99:81:11:2b:b0:a9:c7:06:e4:24:b1:34:b1:27:27: c6:ae:a2:af:72:99:b4:58:c2:1c:a5:f1:07:14:5a: 94:ce:76:b4:dd:f4:71:bd:5e:82:0c:6a:55:32:e6: 97:e3:2f:1e:eb:16:47:12:77:b3:ec:8c:35:0d:1a: 68:11:be:12:ac:3c:08:c7:e5:00:ac:97:d9:ea:95: 5f:b1:30:0e:1e:ba:a3:24:22:84:1c:49:c2:51:e9: ba:cd:27:95:0c:ce:2d:65:1e:93:fd:a8:2c:0b:f7: 13:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F4:99:A3:F3:4B:AB:0E:E2:A8:F3:D2:76:00:AC:55:F2:AB:4C:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3f64db9d-d1d8-3530-a912-accd8e8cae42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:8a:b5:8f:a8:d0:b9:9e:17:42:fb:36:eb:6c:e9:6c:7f:6c: 80:50:59:9d:0f:91:da:07:6e:e4:6e:3d:48:62:15:13:29:6b: 93:70:75:00:ee:23:46:55:9b:11:cf:a4:fa:95:66:b7:46:5a: 87:db:fe:00:08:26:60:23:e3:dc:d5:f9:1a:ca:57:7d:b0:76: 2c:d8:dd:7f:24:fd:49:c4:76:5a:7e:f4:19:08:8e:2a:a5:c8: 7c:16:d7:a3:be:11:e7:9a:59:b2:e4:5c:6d:c8:f3:53:0e:be: 57:fe:a6:3e:10:a5:96:2d:76:0a:46:d3:87:7a:8a:46:0a:a6: 50:88:ff:4b:61:aa:f8:4b:4d:33:77:4f:28:72:36:18:35:8d: d2:69:d3:26:6a:85:42:c2:68:14:1e:ab:9d:b1:c4:63:05:ad: c0:e3:4b:05:fd:87:8b:60:99:3e:e8:c8:7b:df:e5:02:a6:68: 79:e1:0a:f0:ad:1f:1d:bb:48:dc:bb:45:31:d5:a0:c2:a6:1f: c4:c8:6b:b3:80:f2:55:1b:08:67:b7:8f:ba:bc:a2:6c:20:59: ac:cd:8b:af:b3:56:8d:92:b7:5d:3c:1d:0c:0b:ed:60:e0:b3: 7e:2e:8c:d8:b3:74:cd:67:72:54:9c:b3:bf:ae:32:ac:2f:3e: 14:55:7f:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENes4SnZIgwG+0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk M2RlNmQyZjgtMDk1Zi00ZDM3LWIzOTAtYjM5YThhNzg5NzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMoilGOdErwkoUAgf4g2UL0pMMu/MW5ZLGhV IuPYZ2V4NA37bTkbQjXiZxUI6UESYcHmaqMy14HOb4Pc16L6703Uk6cdCZZaiIKW Z3BCIngWc+Bkgaj4Ge0AQ/Wen2FBZJRjkT4r9hb7XM3DpJoiJ6p0eSSt2Z15XNmg BWk5L2HoDZDzPqP9Zd+4Yj5+OEAInWlOOHqZgRErsKnHBuQksTSxJyfGrqKvcpm0 WMIcpfEHFFqUzna03fRxvV6CDGpVMuaX4y8e6xZHEnez7Iw1DRpoEb4SrDwIx+UA rJfZ6pVfsTAOHrqjJCKEHEnCUem6zSeVDM4tZR6T/agsC/cTawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz0maPzS6sO4qjz0nYArFXyq0xxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2Y2NGRiOWQtZDFkOC0z NTMwLWE5MTItYWNjZDhlOGNhZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZ9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+KtY+o0LmeF0L7Nuts6Wx/bIBQWZ0PkdoHbuRuPUhiFRMpa5NwdQDu I0ZVmxHPpPqVZrdGWofb/gAIJmAj49zV+RrKV32wdizY3X8k/UnEdlp+9BkIjiql yHwW16O+EeeaWbLkXG3I81MOvlf+pj4QpZYtdgpG04d6ikYKplCI/0thqvhLTTN3 TyhyNhg1jdJp0yZqhULCaBQeq52xxGMFrcDjSwX9h4tgmT7oyHvf5QKmaHnhCvCt Hx27SNy7RTHVoMKmH8TIa7OA8lUbCGe3j7q8omwgWazNi6+zVo2St108HQwL7WDg s34ujNizdM1nclScs7+uMqwvPhRVf94= -----END CERTIFICATE-----Generated at Sat Jun 13 21:23:44 2026 by rpki-client